Hi Many thanks for this here's the first one Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:13-06-2015Ran by mick__000 (administrator) on WORK on 17-06-2015 16:55:54Running from C:\Users\mick__000\DownloadsLoaded Profiles: mick__000 (Available Profiles: mick__000 & Admin)Platform: Windows 8.1 (X64) OS Language: English (United Kingdom)Internet Explorer Version 11 (Default browser: Chrome)Boot Mode: NormalTutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Stardock Software, Inc) C:\Program Files (x86)\Stardock\ModernMix\MMixSrv.exe(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start8\Start8_64.exe(Microsoft Corporation) C:\Windows\System32\wlanext.exe(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe(Microsoft Corporation) C:\Windows\System32\dasHost.exe() C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe(Hewlett-Packard Company) C:\Program Files (x86)\HP\Common\HPSupportSolutionsFrameworkService.exe(Intel® Corporation) C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe(Intuit) C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe(Elsinore Technologies, Inc.) C:\Program Files (x86)\ScreenConnect Client (df0a10c69c6672e8)\Elsinore.ScreenConnect.ClientService.exe(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe(Toshiba Corporation) C:\Program Files\TOSHIBA\Teco\TecoService.exe(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe(Stardock Software, Inc) C:\Program Files (x86)\Stardock\ModernMix\MMix_64.exe(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe(Elsinore Technologies, Inc.) C:\Program Files (x86)\ScreenConnect Client (df0a10c69c6672e8)\Elsinore.ScreenConnect.WindowsClient.exe(Stardock Software, Inc) C:\Program Files (x86)\Stardock\ModernMix\MMix_32.exe(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe(Microsoft Corporation) C:\Windows\System32\dllhost.exe(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe(Intel Corporation) C:\Windows\System32\igfxtray.exe(Intel Corporation) C:\Windows\System32\igfxsrvc.exe(Intel Corporation) C:\Windows\System32\igfxpers.exe(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoResident.exe(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\System Setting\TssSrv.exe(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\Toshiba.Tempro.UI.CommonNotifier.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [] => [X]HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [914648 2014-03-05] (Conexant Systems, Inc.)HKLM\...\Run: [smartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1830104 2014-01-14] (Conexant Systems, Inc.)HKLM\...\Run: [TecoResident] => C:\Program Files\TOSHIBA\Teco\TecoResident.exe [179288 2014-01-04] (TOSHIBA Corporation)HKLM\...\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [354144 2013-08-13] (TOSHIBA Corporation)HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2556768 2013-10-08] (TOSHIBA Corporation)HKLM\...\Run: [TSSSrv] => C:\Program Files (x86)\TOSHIBA\System Setting\TSSSrv.exe [296008 2013-10-21] (TOSHIBA Corporation)HKLM-x32\...\Run: [TSVU] => c:\Program Files\TOSHIBA\TOSHIBA Smart View Utility\TosSmartViewLauncher.exe [516512 2013-07-23] (TOSHIBA)HKLM-x32\...\Run: [bCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)HKLM-x32\...\Run: [intuit SyncManager] => C:\Program Files (x86)\Common Files\Intuit\Sync\IntuitSyncManager.exe [3775800 2014-08-18] (Intuit Inc. All rights reserved.)HKLM-x32\...\Run: [vspdfprsrv.exe] => C:\Program Files (x86)\Avanquest\Expert PDF 8 Professional\vspdfprsrv.exe [6056448 2012-04-06] (Visagesoft)HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)HKU\S-1-5-21-3335240685-1945134987-2472038377-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8204056 2015-04-23] (Piriform Ltd)HKU\S-1-5-21-3335240685-1945134987-2472038377-1001\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\system32\StikyNot.exe [479744 2014-10-29] (Microsoft Corporation)HKU\S-1-5-21-3335240685-1945134987-2472038377-1001\...\MountPoints2: {56b724e6-c99c-11e4-828c-6c71d90f7740} - "E:\AutoRun.exe" HKU\S-1-5-21-3335240685-1945134987-2472038377-1001\...\MountPoints2: {56b734c2-c99c-11e4-828c-6c71d90f7740} - "E:\AutoRun.exe" HKU\S-1-5-21-3335240685-1945134987-2472038377-1001\...\MountPoints2: {b29cd0f6-a7eb-11e4-8284-6c71d90f7740} - "E:\TotalLock.exe" Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2014-10-14]ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\QuickBooks Update Agent.lnk [2014-10-20]ShortcutTarget: QuickBooks Update Agent.lnk -> C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe (Intuit Limited.)Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\QuickBooks_Standard_21.lnk [2014-10-20]ShortcutTarget: QuickBooks_Standard_21.lnk -> C:\Program Files (x86)\Intuit\QuickBooks 2015\QBW32.EXE (Intuit Limited.)Startup: C:\Users\mick__000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-05-11]ShortcutTarget: Dropbox.lnk -> C:\Users\mick__000\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mick__000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mick__000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mick__000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mick__000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mick__000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mick__000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mick__000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mick__000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) ProxyServer: [s-1-5-21-3335240685-1945134987-2472038377-1001] => 127.0.0.1:8118HKU\S-1-5-21-3335240685-1945134987-2472038377-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.co.uk/webhp?gws_rd=sslHKU\S-1-5-21-3335240685-1945134987-2472038377-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://toshiba13.msn.com/?pc=TEJBHKU\S-1-5-21-3335240685-1945134987-2472038377-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://toshiba.eu/symbaloo_cSearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-3335240685-1945134987-2472038377-1001 -> {BDAE9CBF-5164-4005-B6C1-E014EB05391A} URL = BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)Handler-x32: intu-help-qb8 - {CD17C364-2EC8-4929-91A9-C4839A20E909} - C:\Program Files (x86)\Intuit\QuickBooks 2015\HelpAsyncPluggableProtocol.dll [2014-11-08] (Intuit, Inc.)Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox:========FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll No FileFF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-22] (Google Inc.)FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-22] (Google Inc.)FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2013-08-06] ()FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.) Chrome: =======CHR Profile: C:\Users\mick__000\AppData\Local\Google\Chrome\User Data\DefaultCHR Extension: (Google Drive) - C:\Users\mick__000\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-05-31]CHR Extension: (YouTube) - C:\Users\mick__000\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-05-31]CHR Extension: (Google Search) - C:\Users\mick__000\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-05-31]CHR Extension: (Chrome Hotword Shared Module) - C:\Users\mick__000\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-05-31]CHR Extension: (Google Wallet) - C:\Users\mick__000\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-05-31]CHR Extension: (Gmail) - C:\Users\mick__000\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-05-31] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2251992 2014-07-28] (Broadcom Corporation.)S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)R2 dts_apo_service; C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe [21840 2014-03-21] ()R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-02-25] (WildTangent)R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2011-08-18] (Hewlett-Packard Co.) [File not signed]R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [89840 2015-03-28] (Hewlett-Packard Company)S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]R2 Intel® Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-01] (Intel® Corporation) [File not signed]S3 Intel® Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [822232 2013-07-01] (Intel® Corporation)R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-04-14] (Malwarebytes Corporation)R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)R2 ModernMix; C:\Program Files (x86)\Stardock\ModernMix\MMixSrv.exe [74296 2014-06-12] (Stardock Software, Inc)S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]S2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]R2 QBCFMonitorService; C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe [45056 2014-11-08] (Intuit) [File not signed]S3 QBFCService; C:\Program Files (x86)\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe [65536 2014-08-18] (Intuit Inc.) [File not signed]R2 ScreenConnect Client (df0a10c69c6672e8); C:\Program Files (x86)\ScreenConnect Client (df0a10c69c6672e8)\Elsinore.ScreenConnect.ClientService.exe [34264 2015-03-30] (Elsinore Technologies, Inc.)R2 Start8; C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe [143288 2014-06-18] (Stardock Software, Inc)S3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [116088 2013-12-24] (Toshiba Europe GmbH)R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [170712 2014-07-28] (Broadcom Corporation.)R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [7545008 2014-07-28] (Broadcom Corporation)R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-09-25] (Windows ® Win 7 DDK provider)S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-09-25] (Windows ® Win 7 DDK provider)R1 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [107736 2015-04-14] (Malwarebytes Corporation)R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [136408 2015-06-17] (Malwarebytes Corporation)R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-04-14] (Malwarebytes Corporation)R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [293592 2014-02-11] (Realtek Semiconductor Corp.)R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [31472 2014-02-21] (Synaptics Incorporated)R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [33168 2013-10-10] (Windows ® Win 7 DDK provider)R3 TXEIx64; C:\Windows\System32\drivers\TXEIx64.sys [88592 2014-01-15] (Intel Corporation)R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-06-17 16:55 - 2015-06-17 16:57 - 00018621 _____ C:\Users\mick__000\Downloads\FRST.txt2015-06-17 16:55 - 2015-06-17 16:56 - 00000000 ____D C:\FRST2015-06-17 16:55 - 2015-06-17 16:55 - 02109952 _____ (Farbar) C:\Users\mick__000\Downloads\FRST64.exe2015-06-14 20:32 - 2015-06-14 20:32 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\mick__000\Downloads\revosetup.exe2015-06-14 20:32 - 2015-06-14 20:32 - 00001295 _____ C:\Users\mick__000\Desktop\Revo Uninstaller.lnk2015-06-10 23:46 - 2015-06-10 23:47 - 00011502 _____ C:\Windows\DPINST.LOG2015-06-10 23:45 - 2015-06-10 23:47 - 00001396 _____ C:\Windows\Synaptics.log2015-06-10 23:45 - 2015-06-10 23:45 - 00000000 ___HD C:\Users\mick__000\AppData\Roaming\WinBatch2015-06-10 23:41 - 2015-06-10 23:43 - 177529838 ____H C:\Users\mick__000\Downloads\tpdrv-20140523163348.zip2015-06-10 13:58 - 2015-05-22 14:08 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll2015-06-10 13:58 - 2015-05-21 14:08 - 01119232 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll2015-06-10 13:58 - 2015-05-21 14:08 - 01020928 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll2015-06-10 13:58 - 2015-05-21 14:08 - 00756736 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll2015-06-10 13:58 - 2015-05-21 14:08 - 00422912 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll2015-06-10 13:58 - 2015-05-21 14:08 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll2015-06-10 13:58 - 2015-05-21 14:08 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll2015-06-10 13:58 - 2015-04-16 23:07 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll2015-06-10 13:58 - 2015-04-08 23:07 - 00410336 _____ C:\Windows\system32\ApnDatabase.xml2015-06-10 13:56 - 2015-05-25 14:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll2015-06-10 13:56 - 2015-05-25 14:07 - 01430528 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll2015-06-10 13:56 - 2015-04-08 23:41 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rgb9rast.dll2015-06-10 13:56 - 2015-04-01 23:42 - 03097600 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll2015-06-10 13:56 - 2015-04-01 23:30 - 02483712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll2015-06-10 13:56 - 2015-03-20 04:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\compstui.dll2015-06-10 13:56 - 2015-03-20 04:08 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll2015-06-10 13:56 - 2015-03-20 03:37 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll2015-06-10 13:56 - 2015-03-20 03:07 - 01091072 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll2015-06-10 13:56 - 2015-03-02 02:43 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\rastapi.dll2015-06-10 13:56 - 2015-03-02 02:21 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastapi.dll2015-06-10 13:53 - 2015-04-13 23:37 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\authz.dll2015-06-10 13:53 - 2015-04-13 23:34 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authz.dll2015-06-10 13:53 - 2015-04-10 01:40 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll2015-06-10 13:53 - 2015-04-10 01:17 - 01018880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll2015-06-10 13:48 - 2015-04-25 03:34 - 00653824 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll2015-06-10 13:48 - 2015-04-25 03:33 - 00549888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll2015-06-10 13:48 - 2015-04-16 07:17 - 00325464 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS2015-06-10 13:46 - 2015-04-01 05:21 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe2015-06-10 13:46 - 2015-04-01 05:18 - 00468480 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll2015-06-10 13:46 - 2015-04-01 05:17 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll2015-06-10 13:46 - 2015-04-01 05:08 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll2015-06-10 13:46 - 2015-04-01 04:46 - 03633664 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll2015-06-10 13:46 - 2015-04-01 04:17 - 02551808 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll2015-06-10 13:46 - 2015-04-01 04:17 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe2015-06-10 13:46 - 2015-04-01 03:53 - 00391680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll2015-06-10 13:46 - 2015-04-01 03:53 - 00272896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe2015-06-10 13:46 - 2015-04-01 03:45 - 02749952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll2015-06-10 13:46 - 2015-04-01 03:45 - 00699392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll2015-06-10 13:46 - 2015-04-01 03:14 - 01920000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll2015-06-10 13:46 - 2015-04-01 03:12 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe2015-06-10 13:42 - 2015-05-27 15:35 - 24917504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll2015-06-10 13:42 - 2015-05-27 15:08 - 19607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll2015-06-10 13:42 - 2015-05-23 04:15 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll2015-06-10 13:42 - 2015-05-23 04:14 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec2015-06-10 13:42 - 2015-05-23 04:10 - 02278912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll2015-06-10 13:42 - 2015-05-23 04:05 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll2015-06-10 13:42 - 2015-05-23 04:04 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll2015-06-10 13:42 - 2015-05-23 03:48 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll2015-06-10 13:42 - 2015-05-23 03:47 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll2015-06-10 13:42 - 2015-05-23 03:47 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll2015-06-10 13:42 - 2015-05-23 03:47 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll2015-06-10 13:42 - 2015-05-23 03:43 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll2015-06-10 13:42 - 2015-05-23 03:38 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll2015-06-10 13:42 - 2015-05-23 03:38 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll2015-06-10 13:42 - 2015-05-23 03:37 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl2015-06-10 13:42 - 2015-05-23 03:28 - 12829696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll2015-06-10 13:42 - 2015-05-23 03:28 - 01042944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll2015-06-10 13:42 - 2015-05-23 03:20 - 01950720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll2015-06-10 13:42 - 2015-05-23 03:16 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll2015-06-10 13:42 - 2015-05-23 03:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll2015-06-10 13:42 - 2015-05-22 20:00 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll2015-06-10 13:42 - 2015-05-22 20:00 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll2015-06-10 13:42 - 2015-05-22 20:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec2015-06-10 13:42 - 2015-05-22 19:52 - 06026240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll2015-06-10 13:42 - 2015-05-22 19:48 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll2015-06-10 13:42 - 2015-05-22 19:47 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll2015-06-10 13:42 - 2015-05-22 19:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll2015-06-10 13:42 - 2015-05-22 19:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll2015-06-10 13:42 - 2015-05-22 19:23 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll2015-06-10 13:42 - 2015-05-22 19:21 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll2015-06-10 13:42 - 2015-05-22 19:15 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll2015-06-10 13:42 - 2015-05-22 19:09 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll2015-06-10 13:42 - 2015-05-22 19:08 - 00374272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll2015-06-10 13:42 - 2015-05-22 19:06 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll2015-06-10 13:42 - 2015-05-22 19:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl2015-06-10 13:42 - 2015-05-22 18:57 - 14404096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll2015-06-10 13:42 - 2015-05-22 18:50 - 02426880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll2015-06-10 13:42 - 2015-05-22 18:49 - 02865152 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll2015-06-10 13:42 - 2015-05-22 18:38 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll2015-06-10 13:42 - 2015-05-22 18:26 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll2015-06-10 13:40 - 2015-05-21 17:47 - 04177920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys2015-06-08 21:26 - 2015-06-08 21:26 - 00152920 ____H C:\Users\mick__000\Downloads\Little Rascals Harrogate Event Booking form 2015.pdf.zip2015-06-08 20:53 - 2015-06-08 20:53 - 00000000 ____D C:\Windows\pss2015-06-07 16:31 - 2015-06-07 16:31 - 00000000 ___HD C:\Users\mick__000\AppData\Local\GWX2015-06-05 08:06 - 2015-06-05 08:48 - 00000000 ___HD C:\Users\mick__000\Desktop\Ladycroft2015-06-01 20:04 - 2015-06-01 20:04 - 00156819 ____H C:\Users\mick__000\Downloads\Statements09012849315546 (3).xls2015-06-01 18:51 - 2015-06-01 18:55 - 00000000 ____D C:\AdwCleaner2015-06-01 18:48 - 2015-06-01 18:48 - 02231296 ____H C:\Users\mick__000\Downloads\adwcleaner_4.206.exe2015-05-31 14:30 - 2015-05-31 14:30 - 00007828 ____H C:\Users\mick__000\Downloads\Report_3152015 (8).xls2015-05-31 14:28 - 2015-05-31 14:28 - 00006581 ____H C:\Users\mick__000\Downloads\Report_3152015 (7).xls2015-05-31 14:27 - 2015-05-31 14:27 - 00008440 ____H C:\Users\mick__000\Downloads\Report_3152015 (6).xls2015-05-31 14:26 - 2015-05-31 14:26 - 00006527 ____H C:\Users\mick__000\Downloads\Report_3152015 (5).xls2015-05-31 14:25 - 2015-05-31 14:25 - 00007791 ____H C:\Users\mick__000\Downloads\Report_3152015 (4).xls2015-05-31 14:23 - 2015-05-31 14:23 - 00007141 ____H C:\Users\mick__000\Downloads\Report_3152015 (3).xls2015-05-31 14:20 - 2015-05-31 14:20 - 00008405 ____H C:\Users\mick__000\Downloads\Report_3152015 (2).xls2015-05-31 14:16 - 2015-05-31 14:16 - 00008405 ____H C:\Users\mick__000\Downloads\Report_3152015 (1).xls2015-05-31 14:14 - 2015-05-31 14:14 - 00007192 ____H C:\Users\mick__000\Downloads\Report_3152015.xls2015-05-31 14:09 - 2015-05-31 14:09 - 00046190 ____H C:\Users\mick__000\Downloads\Statements09012864835001.xls2015-05-31 14:03 - 2015-05-31 14:03 - 00079564 ____H C:\Users\mick__000\Downloads\Statements09012849315546 (2).xls2015-05-31 14:02 - 2015-05-31 14:02 - 00079564 ____H C:\Users\mick__000\Downloads\Statements09012849315546 (1).xls2015-05-31 13:57 - 2015-05-31 13:57 - 51789024 ____H (Microsoft Corporation) C:\Users\mick__000\Downloads\Windows-KB890830-x64-V5.24.exe2015-05-31 09:42 - 2015-06-11 17:15 - 00000000 ___HD C:\Users\mick__000\Desktop\June 20152015-05-30 21:37 - 2015-06-15 16:26 - 00002851 _____ C:\Windows\setupact.log2015-05-30 21:37 - 2015-05-30 21:37 - 00000000 _____ C:\Windows\setuperr.log2015-05-30 21:34 - 2015-06-12 15:05 - 00005138 _____ C:\Windows\PFRO.log2015-05-30 18:23 - 2014-11-15 20:05 - 00801584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll2015-05-30 18:23 - 2014-11-15 07:29 - 00962216 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll2015-05-30 18:23 - 2014-11-14 07:57 - 01027584 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll2015-05-30 18:23 - 2014-11-14 06:03 - 00885760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll2015-05-30 18:23 - 2014-11-10 19:06 - 02485056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys2015-05-30 18:23 - 2014-11-10 19:06 - 00473408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys2015-05-30 18:23 - 2014-11-10 19:06 - 00428864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS2015-05-30 18:23 - 2014-11-10 19:06 - 00136512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys2015-05-30 18:23 - 2014-11-10 18:43 - 00273232 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe2015-05-30 18:23 - 2014-11-10 03:57 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\agilevpn.sys2015-05-30 18:23 - 2014-11-10 02:37 - 00845312 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL2015-05-30 18:23 - 2014-11-10 02:34 - 01084416 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL2015-05-30 18:23 - 2014-11-10 02:26 - 00422400 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL2015-05-30 18:23 - 2014-11-10 02:20 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll2015-05-30 18:23 - 2014-11-10 02:09 - 00272384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL2015-05-30 18:23 - 2014-11-10 02:08 - 00702464 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll2015-05-30 18:23 - 2014-11-10 02:06 - 00713216 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll2015-05-30 18:23 - 2014-11-10 01:58 - 02171904 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll2015-05-30 18:23 - 2014-11-10 01:57 - 00624640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll2015-05-30 18:23 - 2014-11-10 01:57 - 00561664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll2015-05-30 18:23 - 2014-11-08 05:00 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndproxy.sys2015-05-30 18:23 - 2014-11-08 05:00 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndistapi.sys2015-05-30 18:23 - 2014-11-08 04:58 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rasl2tp.sys2015-05-30 18:23 - 2014-11-08 04:58 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wanarp.sys2015-05-30 18:23 - 2014-11-08 04:56 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\kmddsp.tsp2015-05-30 18:23 - 2014-11-08 04:56 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\rasmxs.dll2015-05-30 18:23 - 2014-11-08 04:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\rasser.dll2015-05-30 18:23 - 2014-11-08 04:24 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\rasdiag.dll2015-05-30 18:23 - 2014-11-08 04:13 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kmddsp.tsp2015-05-30 18:23 - 2014-11-08 04:13 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasmxs.dll2015-05-30 18:23 - 2014-11-08 04:13 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasser.dll2015-05-30 18:23 - 2014-11-08 03:48 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasdiag.dll2015-05-30 18:23 - 2014-11-08 03:38 - 00166912 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll2015-05-30 18:23 - 2014-11-08 03:17 - 00143360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll2015-05-30 18:23 - 2014-11-08 03:09 - 00182784 _____ (Microsoft Corporation) C:\Windows\system32\rascfg.dll2015-05-30 18:23 - 2014-11-08 03:03 - 00733696 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll2015-05-30 18:23 - 2014-11-08 02:59 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rascfg.dll2015-05-30 18:23 - 2014-11-08 02:58 - 04837376 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll2015-05-30 18:23 - 2014-11-08 02:49 - 01154048 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe2015-05-30 18:23 - 2014-11-07 04:58 - 00952896 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll2015-05-30 18:23 - 2014-11-07 04:20 - 00786120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll2015-05-30 18:23 - 2014-11-05 03:12 - 00211968 _____ (Microsoft Corporation) C:\Windows\system32\QSHVHOST.DLL2015-05-30 18:23 - 2014-11-05 03:12 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\QSVRMGMT.DLL2015-05-30 18:23 - 2014-11-05 03:06 - 00514048 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairing.dll2015-05-30 18:23 - 2014-11-05 02:44 - 00657920 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll2015-05-30 18:23 - 2014-11-05 02:43 - 00252416 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll2015-05-30 18:23 - 2014-11-05 02:41 - 00558080 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll2015-05-30 18:23 - 2014-11-05 02:39 - 00155648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QSHVHOST.DLL2015-05-30 18:23 - 2014-11-05 02:39 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QSVRMGMT.DLL2015-05-30 18:23 - 2014-11-05 02:33 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DevicePairing.dll2015-05-30 18:23 - 2014-11-05 02:21 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll2015-05-30 18:23 - 2014-11-05 02:20 - 00498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll2015-05-30 18:23 - 2014-11-05 02:18 - 00507392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll2015-05-30 18:23 - 2014-11-05 02:14 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll2015-05-30 18:23 - 2014-11-05 02:06 - 00555520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSDApi.dll2015-05-30 18:23 - 2014-11-04 20:33 - 00058176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys2015-05-30 18:23 - 2014-11-04 20:25 - 00059712 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\kbdclass.sys2015-05-30 18:23 - 2014-11-04 20:25 - 00051008 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\mouclass.sys2015-05-30 18:23 - 2014-11-04 07:55 - 00026112 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\sermouse.sys2015-05-30 18:23 - 2014-11-04 07:54 - 00108544 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\i8042prt.sys2015-05-30 18:23 - 2014-11-04 07:54 - 00032256 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys2015-05-30 18:23 - 2014-11-04 07:54 - 00030208 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\mouhid.sys2015-05-30 18:23 - 2014-11-04 07:27 - 00128512 _____ (Microsoft Corporation) C:\Windows\splwow64.exe2015-05-30 18:23 - 2014-11-04 06:01 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe2015-05-30 18:23 - 2014-10-31 01:51 - 18823168 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll2015-05-30 18:23 - 2014-10-31 01:10 - 15158784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll2015-05-30 18:23 - 2014-10-29 04:05 - 00551232 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys2015-05-30 18:23 - 2014-10-29 02:55 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll2015-05-30 18:23 - 2014-10-29 02:13 - 00169984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll2015-05-30 18:23 - 2014-10-21 02:59 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\eventcls.dll2015-05-30 18:23 - 2014-10-21 02:19 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eventcls.dll2015-05-30 18:23 - 2014-10-21 01:50 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\vsstrace.dll2015-05-30 18:23 - 2014-10-21 01:31 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\vssapi.dll2015-05-30 18:23 - 2014-10-21 01:31 - 00055296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vsstrace.dll2015-05-30 18:23 - 2014-10-21 01:30 - 01454080 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe2015-05-30 18:23 - 2014-10-21 01:20 - 01142272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vssapi.dll2015-05-30 18:23 - 2014-10-17 05:56 - 00039744 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys2015-05-30 18:23 - 2014-10-17 04:35 - 00086336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys2015-05-30 17:59 - 2015-06-17 15:12 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys2015-05-30 17:59 - 2015-05-30 17:59 - 00001129 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk2015-05-30 17:59 - 2015-05-30 17:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware2015-05-30 17:59 - 2015-05-30 17:59 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware2015-05-30 17:59 - 2015-04-14 10:30 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys2015-05-30 17:59 - 2015-04-14 10:30 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys2015-05-30 17:59 - 2015-04-14 10:30 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys2015-05-30 15:43 - 2015-05-30 15:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Apps Sync2015-05-30 15:29 - 2015-05-30 15:29 - 00000000 _____ C:\autoexec.bat2015-05-30 12:52 - 2015-06-17 15:59 - 01704170 _____ C:\Windows\WindowsUpdate.log2015-05-30 12:52 - 2015-06-01 08:08 - 00000000 ____D C:\ProgramData\ScreenConnect Client (df0a10c69c6672e8)2015-05-30 10:13 - 2015-06-17 16:46 - 00003272 _____ C:\Windows\System32\Tasks\Softcomp Software Job2015-05-30 10:12 - 2015-05-30 17:21 - 00000000 ____D C:\Program Files (x86)\Softcomp Software2015-05-30 10:12 - 2015-05-30 10:12 - 00000000 ____H C:\Users\mick__000\AppData\Roaming\6E1B.tmp2015-05-19 18:34 - 2015-04-30 21:35 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll2015-05-19 18:34 - 2015-04-30 21:35 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll2015-05-19 17:32 - 2015-04-10 01:34 - 02256896 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll2015-05-19 17:32 - 2015-04-10 01:11 - 01943040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll2015-05-19 17:32 - 2015-03-30 06:47 - 00561928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys2015-05-19 17:32 - 2015-03-27 04:27 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll2015-05-19 17:32 - 2015-03-27 03:50 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll2015-05-19 17:32 - 2015-03-27 03:48 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll2015-05-19 17:32 - 2015-03-17 18:26 - 00467776 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS2015-05-19 17:32 - 2015-03-09 03:02 - 00057856 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\bthhfenum.sys2015-05-19 17:32 - 2015-01-30 01:53 - 02819584 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll2015-05-19 17:32 - 2014-11-14 07:58 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsDatabase.dll2015-05-19 17:31 - 2015-04-01 23:22 - 02985984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbgeng.dll2015-05-19 17:31 - 2015-04-01 23:20 - 04417536 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll2015-05-19 17:31 - 2015-04-01 04:45 - 01491456 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll2015-05-19 17:31 - 2015-04-01 03:31 - 01207296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbghelp.dll2015-05-19 17:31 - 2015-03-20 02:56 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ahcache.sys2015-05-19 17:31 - 2015-03-13 05:03 - 00239424 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys2015-05-19 17:31 - 2015-03-13 05:03 - 00154432 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys2015-05-19 17:31 - 2015-03-13 02:11 - 02162176 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll2015-05-19 17:31 - 2015-03-13 01:39 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll2015-05-19 17:31 - 2015-03-11 02:49 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe2015-05-19 17:31 - 2015-03-11 02:09 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe2015-05-19 17:31 - 2015-03-06 03:47 - 01696256 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll2015-05-19 17:31 - 2015-03-04 02:32 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Input.Inking.dll2015-05-19 17:31 - 2015-03-04 02:12 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Input.Inking.dll2015-05-19 17:30 - 2015-04-08 23:55 - 00410128 _____ (Microsoft Corporation) C:\Windows\system32\services.exe2015-05-19 17:30 - 2015-03-06 04:08 - 02067968 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll2015-05-19 17:30 - 2015-03-06 03:43 - 01969664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll2015-05-19 17:30 - 2015-02-18 00:19 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll2015-05-19 17:29 - 2015-05-01 00:05 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll2015-05-19 17:29 - 2015-04-30 23:48 - 00358912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll2015-05-19 17:29 - 2015-04-10 02:00 - 01996800 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll2015-05-19 17:29 - 2015-04-10 01:50 - 01387008 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll2015-05-19 17:29 - 2015-04-10 01:26 - 01560576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll2015-05-19 17:29 - 2015-04-03 01:35 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\PhotoMetadataHandler.dll2015-05-19 17:29 - 2015-04-03 01:14 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhotoMetadataHandler.dll2015-05-19 17:29 - 2015-03-13 03:02 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys2015-05-19 17:28 - 2015-04-21 17:13 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll2015-05-19 17:28 - 2015-04-21 16:49 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe2015-05-19 17:28 - 2015-04-21 16:28 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-06-17 16:37 - 2014-04-17 23:43 - 00000916 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job2015-06-17 16:37 - 2014-04-17 23:43 - 00000912 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job2015-06-17 16:00 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\system32\sru2015-06-17 12:52 - 2014-09-20 11:48 - 00003926 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{23F4B840-EE9B-447A-A50B-930BF7BB28AE}2015-06-17 11:34 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\AppReadiness2015-06-16 21:53 - 2014-10-14 21:47 - 00000328 _____ C:\Windows\Tasks\WebReg Officejet J4680 Series.job2015-06-15 16:28 - 2014-09-20 11:41 - 00000000 __HDO C:\Users\mick__000\OneDrive2015-06-15 16:27 - 2014-09-20 11:32 - 00000000 ___HD C:\Users\mick__0002015-06-15 16:26 - 2013-08-22 15:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT2015-06-14 20:32 - 2014-11-03 22:08 - 00000000 ____D C:\Program Files (x86)\VS Revo Group2015-06-14 13:49 - 2014-07-28 14:14 - 04975308 _____ C:\Users\Public\CAFADEBUG.log2015-06-12 11:48 - 2014-09-20 11:39 - 00003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3335240685-1945134987-2472038377-10012015-06-12 03:55 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\rescache2015-06-11 23:09 - 2013-08-22 15:44 - 00502704 _____ C:\Windows\system32\FNTCACHE.DAT2015-06-11 23:08 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\Vss2015-06-11 23:05 - 2014-12-13 17:44 - 00000000 ____D C:\Windows\system32\appraiser2015-06-11 23:05 - 2014-09-28 13:55 - 00000000 ___SD C:\Windows\system32\CompatTel2015-06-11 23:05 - 2013-08-22 16:36 - 00000000 ___RD C:\Windows\ToastData2015-06-11 23:05 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\SysWOW64\en-GB2015-06-11 23:05 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\system32\en-GB2015-06-11 23:05 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\PolicyDefinitions2015-06-11 18:06 - 2014-10-21 19:23 - 00000000 __RHD C:\Users\mick__000\Dropbox2015-06-11 18:06 - 2014-10-21 18:54 - 00000000 ___HD C:\Users\mick__000\AppData\Roaming\Dropbox2015-06-10 23:47 - 2014-07-28 13:55 - 00002990 _____ C:\Windows\System32\Tasks\Synaptics TouchPad Enhancements2015-06-10 20:34 - 2013-08-22 16:20 - 00000000 ____D C:\Windows\CbsTemp2015-06-10 20:33 - 2014-10-09 15:35 - 00000000 ____D C:\ProgramData\Microsoft Help2015-06-10 20:29 - 2014-09-22 16:04 - 00000000 ____D C:\Windows\system32\MRT2015-06-10 20:14 - 2014-09-22 16:04 - 140135120 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe2015-06-10 19:49 - 2015-04-07 10:45 - 00002276 _____ C:\Users\Public\Desktop\Google Chrome.lnk2015-06-08 20:53 - 2013-08-22 14:25 - 00262144 ___SH C:\Windows\system32\config\BBI2015-06-05 08:48 - 2014-10-21 16:38 - 00219648 ___SH C:\Users\mick__000\Desktop\Thumbs.db2015-06-05 06:38 - 2014-04-17 23:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive2015-06-03 17:18 - 2015-04-16 07:47 - 00792568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe2015-06-03 17:18 - 2015-04-16 07:47 - 00178168 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl2015-06-02 07:43 - 2015-04-19 17:30 - 00354816 ___SH C:\Users\mick__000\Downloads\Thumbs.db2015-06-01 17:43 - 2014-10-14 21:13 - 00005736 _____ C:\ProgramData\hpzinstall.log2015-06-01 17:42 - 2014-10-14 21:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP2015-06-01 17:42 - 2014-10-14 21:14 - 00000000 ____D C:\Program Files (x86)\HP2015-05-31 13:52 - 2014-09-20 11:44 - 00000000 ___HD C:\Users\mick__000\AppData\Local\Google2015-05-31 13:52 - 2014-04-17 23:43 - 00000000 ____D C:\Program Files (x86)\Google2015-05-31 13:21 - 2013-08-22 14:25 - 00000234 _____ C:\Windows\win.ini2015-05-30 21:35 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\SysWOW64\setup2015-05-30 21:35 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\system32\setup2015-05-30 21:34 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\addins2015-05-30 15:11 - 2014-10-14 17:37 - 00000000 ____D C:\ProgramData\Ashampoo2015-05-30 10:31 - 2015-04-24 22:00 - 00002790 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC2015-05-30 10:14 - 2014-09-20 11:33 - 00001380 ____H C:\Users\mick__000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk2015-05-22 16:32 - 2014-04-17 23:43 - 00003888 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA2015-05-22 16:32 - 2014-04-17 23:43 - 00003652 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore2015-05-22 16:28 - 2014-10-09 19:15 - 00000000 ____D C:\Program Files\Microsoft Silverlight2015-05-22 16:28 - 2014-10-09 19:15 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight2015-05-22 16:22 - 2015-04-06 21:56 - 00000000 ___SD C:\Windows\SysWOW64\GWX2015-05-22 16:22 - 2015-04-06 21:56 - 00000000 ___SD C:\Windows\system32\GWX2015-05-22 16:22 - 2013-08-22 16:36 - 00000000 ___RD C:\Windows\ImmersiveControlPanel2015-05-22 16:22 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\system32\AdvancedInstallers2015-05-19 18:02 - 2014-10-09 19:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight2015-05-19 17:52 - 2013-08-22 21:59 - 00000000 ____D C:\Program Files\Windows Journal2015-05-19 17:19 - 2014-10-21 08:20 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk ==================== Files in the root of some directories ======= 2015-05-30 10:12 - 2015-05-30 10:12 - 0000000 ____H () C:\Users\mick__000\AppData\Roaming\6E1B.tmp2015-04-10 21:47 - 2015-04-13 16:50 - 0004096 ____H () C:\Users\mick__000\AppData\Local\keyfile3.drm2014-09-30 17:00 - 2014-09-30 17:00 - 0000000 ____H () C:\Users\mick__000\AppData\Local\{5DDA9E2B-815D-40A2-8920-2BAA6A174045}2014-10-14 21:13 - 2015-06-01 17:43 - 0005736 _____ () C:\ProgramData\hpzinstall.log Some files in TEMP:====================C:\Users\mick__000\AppData\Local\Temp\62B2.tmp.exeC:\Users\mick__000\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpyswosw.dllC:\Users\mick__000\AppData\Local\Temp\sqlite3.dllC:\Users\mick__000\AppData\Local\Temp\tasks.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signedC:\Windows\System32\wininit.exe => File is digitally signedC:\Windows\explorer.exe => File is digitally signedC:\Windows\SysWOW64\explorer.exe => File is digitally signedC:\Windows\System32\svchost.exe => File is digitally signedC:\Windows\SysWOW64\svchost.exe => File is digitally signedC:\Windows\System32\services.exe => File is digitally signedC:\Windows\System32\User32.dll => File is digitally signedC:\Windows\SysWOW64\User32.dll => File is digitally signedC:\Windows\System32\userinit.exe => File is digitally signedC:\Windows\SysWOW64\userinit.exe => File is digitally signedC:\Windows\System32\rpcss.dll => File is digitally signedC:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-06-09 05:18 ==================== End of log ============================ and the second one Additional scan result of Farbar Recovery Scan Tool (x64) Version:13-06-2015Ran by mick__000 at 2015-06-17 16:58:24Running from C:\Users\mick__000\DownloadsBoot Mode: Normal========================================================== ==================== Accounts: ============================= Admin (S-1-5-21-3335240685-1945134987-2472038377-1004 - Administrator - Enabled) => C:\Users\AdminAdministrator (S-1-5-21-3335240685-1945134987-2472038377-500 - Administrator - Disabled)Guest (S-1-5-21-3335240685-1945134987-2472038377-501 - Limited - Disabled)HomeGroupUser$ (S-1-5-21-3335240685-1945134987-2472038377-1003 - Limited - Enabled)mick__000 (S-1-5-21-3335240685-1945134987-2472038377-1001 - Administrator - Enabled) => C:\Users\mick__000 ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 4660_4680_Help (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) HiddenAdobe Reader XI (11.0.11) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.11 - Adobe Systems Incorporated)Ashampoo Burning Studio 14 v.14.0.5 (HKLM-x32\...\{91B33C97-7BCF-CDFE-4321-58EBF3E8641C}_is1) (Version: 14.0.5 - Ashampoo GmbH & Co. KG)Avanquest update (HKLM-x32\...\{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}) (Version: 1.33 - Avanquest Software)Bejeweled 3 (x32 Version: 2.2.0.98 - WildTangent) Hiddenbpd_scan (x32 Version: 3.00.0000 - Hewlett-Packard) HiddenBPDSoftware (x32 Version: 140.0.001.000 - Hewlett-Packard) HiddenBPDSoftware_Ini (x32 Version: 1.00.0000 - Hewlett-Packard) HiddenBroadcom 802.11 Network Adapter (HKLM\...\Broadcom 802.11 Network Adapter) (Version: 6.30.223.227 - Broadcom Corporation)BufferChm (x32 Version: 140.0.298.000 - Hewlett-Packard) HiddenCCleaner (HKLM\...\CCleaner) (Version: 5.05 - Piriform)Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.65.36.50 - Conexant)Cut the Rope (x32 Version: 3.0.2.38 - WildTangent) HiddenCyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3920.05 - CyberLink Corp.)Destinations (x32 Version: 140.0.253.000 - Hewlett-Packard) HiddenDeviceDiscovery (x32 Version: 140.0.298.000 - Hewlett-Packard) HiddenDocProc (x32 Version: 140.0.185.000 - Hewlett-Packard) HiddenDropbox (HKU\S-1-5-21-3335240685-1945134987-2472038377-1001\...\Dropbox) (Version: 3.4.6 - Dropbox, Inc.)DTS Sound (HKLM-x32\...\{5B54DDC3-0ACC-4722-9C23-C3F07AF4825D}) (Version: 1.01.6700 - DTS, Inc.)Enchanted Cavern 2 (x32 Version: 2.2.0.110 - WildTangent) HiddenExpert PDF 8 Professional (HKLM-x32\...\{FC279721-37A6-4777-AFD8-7A56681EBA14}) (Version: - )Fax (x32 Version: 140.0.307.000 - Hewlett-Packard) HiddenGoogle Apps Migration For Microsoft Outlook® 3.4.27.52 (HKLM-x32\...\{65960C6E-BFA2-4FE7-A1BC-8028F3072566}) (Version: 3.4.27.52 - Google, Inc.)Google Apps Sync™ for Microsoft Outlook® 3.7.410.1100 (HKLM-x32\...\{799A7E2B-388F-4BDE-B55B-47AF42C6440A}) (Version: 3.7.410.1100 - Google, Inc.)Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.124 - Google Inc.)Google Drive (HKLM-x32\...\{CBC9F5FD-5CFA-4A33-81CD-369EAB77E3A6}) (Version: 1.22.9403.0223 - Google, Inc.)Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) HiddenGoogle Update Helper (x32 Version: 1.3.27.5 - Google Inc.) HiddenGPBaseService2 (x32 Version: 140.0.297.000 - Hewlett-Packard) HiddenHP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)HP OfficeJet J4600 All-In-One Series (HKLM\...\{6122CE5C-9DD3-402D-8413-57B681739FA7}) (Version: 14.0 - HP)HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)HP Support Solutions Framework (HKLM-x32\...\{FC3C2B77-6800-48C6-A15D-9D1031130C16}) (Version: 11.51.0049 - Hewlett-Packard Company)HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)HPDiagnosticAlert (x32 Version: 1.00.0001 - Microsoft) HiddenHPProductAssistant (x32 Version: 140.0.298.000 - Hewlett-Packard) HiddenIntel® Chipset Device Software (x32 Version: 10.0.13 - Intel® Corporation) HiddenIntel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3408 - Intel Corporation)Intel® Trusted Execution Engine (HKLM\...\{176E2755-0A17-42C6-88E2-192AB2131278}) (Version: 1.0.0.1064 - Intel Corporation)Internet Explorer (Enable DEP) (HKLM\...\{a9264802-8a7a-40fe-a135-5c6d204aed7a}.sdb) (Version: - )J4680 (x32 Version: 140.0.001.000 - Hewlett-Packard) HiddenMagic Academy (x32 Version: 2.2.0.98 - WildTangent) HiddenMahjongg Artifacts (x32 Version: 2.2.0.110 - WildTangent) HiddenMalwarebytes Anti-Malware version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)MarketResearch (x32 Version: 140.0.212.000 - Hewlett-Packard) HiddenMicrosoft Office Access Runtime (English) 2007 (HKLM-x32\...\{90120000-001C-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUSR) (Version: 14.0.7015.1000 - Microsoft Corporation)Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)My Kingdom for the Princess 3 (x32 Version: 2.2.0.110 - WildTangent) HiddenNetwork64 (Version: 140.0.306.000 - Hewlett-Packard) HiddenOCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)Peggle Nights (x32 Version: 2.2.0.98 - WildTangent) HiddenPlants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) HiddenPolar Bowler (x32 Version: 2.2.0.97 - WildTangent) HiddenProductContext (x32 Version: 140.0.001.000 - Hewlett-Packard) HiddenQuickBooks (x32 Version: 25.0.4004.2506 - Intuit Limited) HiddenQuickBooks Pro 2015 (HKLM-x32\...\{8F02EFA1-8F5E-4E47-A6B5-D99E4FE90271}) (Version: 25.0.4001.2506 - Intuit Limited)QuickBooks Runtime Redistributable (HKLM\...\{F2A4F809-2DE6-4D27-888B-4D2BB8DAF20E}) (Version: 1.00.0000 - Intuit Inc.)Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.3.9600.29077 - Realtek Semiconductor Corp.)Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.20.815.2013 - Realtek)Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)Scan (x32 Version: 140.0.253.000 - Hewlett-Packard) HiddenScreenConnect Client (df0a10c69c6672e8) (HKLM-x32\...\{E5F51C56-6EE0-4DD8-BC13-754799031793}) (Version: 5.2.8724.5567 - Elsinore Technologies, Inc.)Secure Download Manager (HKLM-x32\...\{E040B65B-8683-4228-8C33-D44A141E40EA}) (Version: 3.1.60 - Kivuto Solutions Inc.)Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)Sky Go Desktop (HKU\S-1-5-21-3335240685-1945134987-2472038377-1001\...\3439041649.go.sky.com) (Version: - go.sky.com)SolutionCenter (x32 Version: 140.0.299.000 - Hewlett-Packard) HiddenStardock ModernMix (HKLM-x32\...\Stardock ModernMix) (Version: 1.20 - Stardock Software, Inc.)Stardock Start8 (HKLM-x32\...\Stardock Start8) (Version: 1.45 - Stardock Software, Inc.)Status (x32 Version: 140.0.342.000 - Hewlett-Packard) HiddenSymbaloo (HKLM-x32\...\Symbaloo) (Version: 1.0.0 - Symbaloo Launcher by Toshiba Europe GmbH)Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 18.1.3.0 - Synaptics Incorporated)Toolbox (x32 Version: 140.0.596.000 - Hewlett-Packard) HiddenTOSHIBA Desktop Assist (HKLM\...\{C4CDCEF0-0A7A-4425-887C-33E39533D758}) (Version: 1.03.02.6402 - Toshiba Corporation)TOSHIBA Display Utility (HKLM\...\{484A4296-6F3D-4182-8CFA-D664F7DA34AA}) (Version: 1.1.17.0 - Toshiba Corporation)TOSHIBA eco Utility (HKLM\...\{94D2A899-0C34-4420-880E-AE337E635AB0}) (Version: 2.4.2.6403 - Toshiba Corporation)TOSHIBA Function Key (HKLM\...\{1844CFE2-EBA3-490A-8A5E-9BFC646342FD}) (Version: 1.1.5.6402 - Toshiba Corporation)TOSHIBA Manuals (HKLM-x32\...\{90FF4432-21B7-4AF6-BA6E-FB8C1FED9173}) (Version: 10.19 - TOSHIBA)TOSHIBA Password Utility (HKLM-x32\...\InstallShield_{26BB68BB-CF93-4A12-BC6D-A3B6F53AC8D9}) (Version: 6.0.4.0 - Toshiba Corporation)TOSHIBA PC Health Monitor (HKLM\...\{9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}) (Version: 3.01.02.6400 - Toshiba Corporation)TOSHIBA Recovery Media Creator (HKLM-x32\...\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}) (Version: 3.2.00.56006005 - Toshiba Corporation)TOSHIBA Service Station (HKLM\...\{BFE4C813-4DD4-4B1C-97F4-76A459055C8D}) (Version: 2.6.13 - Toshiba Corporation)TOSHIBA Start Screen Option (HKLM\...\{06B71035-F19F-4F76-9875-FFCCD4FC3F83}) (Version: 1.00.01.6402 - Toshiba Corporation)TOSHIBA System Driver (HKLM-x32\...\{1E6A96A1-2BAB-43EF-8087-30437593C66C}) (Version: 1.00.0033 - Toshiba Corporation)TOSHIBA System Settings (HKLM-x32\...\{4D57ED72-6B01-40BD-9CA9-012B8FC09CEB}) (Version: 2.0.1.32003 - Toshiba Corporation)Toshiba TEMPRO (HKLM-x32\...\{F76F5214-83A8-4030-80C9-1EF57391D72A}) (Version: 4.5.1 - Toshiba Europe GmbH)TrayApp (x32 Version: 140.0.297.000 - Hewlett-Packard) HiddenUpdate Installer for WildTangent Games App (x32 Version: - WildTangent) HiddenVC12X64Redist (HKLM\...\{B573CC21-AE24-4BC5-9B0B-15CF29A3F982}) (Version: 1.00.0000 - Intuit Inc.)VC12X86Redist (HKLM-x32\...\{EA9886ED-21F8-4867-A049-CE6817291EE6}) (Version: 1.00.0000 - Intuit Inc.)Virtual Villagers 5 - New Believers (x32 Version: 3.0.2.32 - WildTangent) HiddenVisual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version: - Microsoft Corporation)Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)WebReg (x32 Version: 140.0.297.017 - Hewlett-Packard) HiddenWildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)WildTangent Games App (Toshiba Games) (x32 Version: 4.0.10.25 - WildTangent) HiddenYouda Jewel Shop (x32 Version: 3.0.2.32 - WildTangent) Hidden ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-3335240685-1945134987-2472038377-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\mick__000\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)CustomCLSID: HKU\S-1-5-21-3335240685-1945134987-2472038377-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\mick__000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)CustomCLSID: HKU\S-1-5-21-3335240685-1945134987-2472038377-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mick__000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)CustomCLSID: HKU\S-1-5-21-3335240685-1945134987-2472038377-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mick__000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)CustomCLSID: HKU\S-1-5-21-3335240685-1945134987-2472038377-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mick__000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)CustomCLSID: HKU\S-1-5-21-3335240685-1945134987-2472038377-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mick__000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)CustomCLSID: HKU\S-1-5-21-3335240685-1945134987-2472038377-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mick__000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)CustomCLSID: HKU\S-1-5-21-3335240685-1945134987-2472038377-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mick__000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)CustomCLSID: HKU\S-1-5-21-3335240685-1945134987-2472038377-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mick__000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)CustomCLSID: HKU\S-1-5-21-3335240685-1945134987-2472038377-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\mick__000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.) ==================== Restore Points ========================= 30-05-2015 15:06:12 Removed Easy Poster Printer07-06-2015 05:28:31 Scheduled Checkpoint10-06-2015 20:01:04 Windows Update ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {04F66339-96B5-468A-947B-DD0F832D1995} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\Logon => C:\Windows\system32\GWX\GWX.exe [2015-05-06] (Microsoft Corporation)Task: {14932CE3-572E-4E4D-A310-859CF28D8AD5} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => C:\Windows\system32\compattel\DiagTrackRunner.exe [2015-03-15] (Microsoft Corporation)Task: {194302B0-2227-492C-B7B3-4A707617A074} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-04-23] (Piriform Ltd)Task: {2737BAAD-C05F-49E5-B952-D4DFDD728024} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-05-06] (Microsoft Corporation)Task: {27916668-AEA9-424A-BD8A-4E056F50A01F} - System32\Tasks\Synaptics TouchPad Enhancements => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2014-02-21] (Synaptics Incorporated)Task: {4BA464FC-AE9B-4269-9D3C-77C34E81392F} - System32\Tasks\Toshiba\CommonNotifier => C:\Program Files (x86)\Toshiba TEMPRO\Toshiba.Tempro.UI.CommonNotifier.exe [2013-12-24] (Toshiba Europe GmbH)Task: {54870B62-4CB9-4A10-B1E4-0D108F9A2F37} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)Task: {55061036-D416-4D0E-BD74-9C22714C08D7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-17] (Google Inc.)Task: {5A5EF428-1C1E-498D-803F-3DB571ECFD9E} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-06-10] (Microsoft Corporation)Task: {78A63496-2046-47A1-9D5E-73915FF00EFF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-17] (Google Inc.)Task: {7915D30A-4619-4C42-ABB1-4C4EAD517549} - System32\Tasks\WebReg Officejet J4680 Series => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqwrg.exe [2011-04-29] (Hewlett-Packard Company)Task: {BB76D8B0-F057-49EA-A640-01210D57F05F} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle => C:\Windows\system32\GWX\GWX.exe [2015-05-06] (Microsoft Corporation)Task: {BC2505B3-89F8-44B7-B961-4C784B138BC9} - System32\Tasks\TOSHIBA\Service Station => C:\Program Files\TOSHIBA\Toshiba Service Station\ToshibaServiceStation.exe [2013-09-24] (TOSHIBA Corporation)Task: {C1D2AD6C-7BE8-41A5-A9E9-C6A1F0727741} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-05-06] (Microsoft Corporation)Task: {D06286D5-CE10-4A66-9AE4-0DE3B37CE73E} - System32\Tasks\Softcomp Software Job => C:\Program Files (x86)\Softcomp Software\swjob.exe [2015-05-30] (SecureSoft)Task: {E8E284B3-E3F1-4897-A481-A641964092B1} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => schtasksTask: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exeTask: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exeTask: C:\Windows\Tasks\WebReg Officejet J4680 Series.job => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqwrg.exe ==================== Loaded Modules (Whitelisted) ============== 2014-03-21 14:09 - 2014-03-21 14:09 - 00021840 _____ () C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF2015-06-10 07:41 - 2015-06-05 19:22 - 01281864 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.124\libglesv2.dll2015-06-10 07:41 - 2015-06-05 19:22 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.124\libegl.dll2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\office14\Cultures\office.odf ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\Users\mick__000\OneDrive:ms-propertiesAlternateDataStreams: C:\Users\mick__000\Desktop\2015-04-30 13.24.28.jpg:com.dropbox.attributes ==================== Safe Mode (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ScreenConnect Client (df0a10c69c6672e8) => ""="Service" ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-3335240685-1945134987-2472038377-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\mick__000\Desktop\PaulLindley-night2013-1.jpgDNS Servers: 192.168.1.1 ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) HKLM\...\StartupApproved\StartupFolder: => "QuickBooks_Standard_21.lnk"HKLM\...\StartupApproved\StartupFolder: => "QuickBooks Update Agent.lnk"HKLM\...\StartupApproved\StartupFolder: => "HP Digital Imaging Monitor.lnk"HKLM\...\StartupApproved\Run: => "HotKeysCmds"HKLM\...\StartupApproved\Run: => "TCrdMain"HKLM\...\StartupApproved\Run32: => "vspdfprsrv.exe"HKLM\...\StartupApproved\Run32: => "Intuit SyncManager"HKLM\...\StartupApproved\Run32: => "HP Software Update"HKU\S-1-5-21-3335240685-1945134987-2472038377-1001\...\StartupApproved\StartupFolder: => "Dropbox.lnk"HKU\S-1-5-21-3335240685-1945134987-2472038377-1001\...\StartupApproved\Run: => "RESTART_STICKY_NOTES"HKU\S-1-5-21-3335240685-1945134987-2472038377-1001\...\StartupApproved\Run: => "CCleaner Monitoring" ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139FirewallRules: [{2BE8D268-F369-4B83-9DD7-C5D9F16E8D2C}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Movie\PowerDVD Cinema\PowerDVDCinema12.exeFirewallRules: [{952044D2-3E0E-4AB8-859F-E9826BA6B6FC}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exeFirewallRules: [{9385461E-8AF8-4052-A0FE-55659340436D}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exeFirewallRules: [{F8235B15-096C-4834-BDD1-C40C0A602485}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxm08.exeFirewallRules: [{2242826C-3B47-41FF-BD7B-EE2FD1BEFBDF}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposfx08.exeFirewallRules: [{908B3B2A-72B9-400C-9D06-B1AF19FBBBA3}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exeFirewallRules: [{F41EAFD7-9521-4B95-85DC-AA68A049D5A9}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exeFirewallRules: [{8DC58E7B-FDE3-4947-A5A8-057FF0FA3C2F}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exeFirewallRules: [{A6232A1C-69CA-4430-BD33-B1F5B851A3E7}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpzwiz01.exeFirewallRules: [{10981E5C-5BB5-486A-8AD2-DC60BA7D2589}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpoews01.exeFirewallRules: [{8B87C843-CC3C-4EC1-B2AD-C21DD65709E4}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exeFirewallRules: [{46EE29DC-06DB-4368-A09D-C095711ED7C2}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxs08.exeFirewallRules: [{013424D3-F8A7-494B-842C-01E9ED58FDAA}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqfxt08.exeFirewallRules: [{746ED49F-7E1E-44FC-9A67-79460E00986D}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exeFirewallRules: [{48A803A9-28D5-4E88-A83F-2DB2A46057A1}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exeFirewallRules: [{086F4F69-3537-49FA-B91C-312DBC3E5410}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exeFirewallRules: [{FFE1248C-FF1B-4424-A1F2-97C0EDAC1AE3}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exeFirewallRules: [{BE1AE2FD-10C5-4FF3-B2A2-95F276114138}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exeFirewallRules: [{7A07D92F-30A0-4582-BF6B-FA5788DB00FA}] => (Allow) C:\Users\mick__000\AppData\Roaming\Dropbox\bin\Dropbox.exeFirewallRules: [{9A3B3771-6E1C-4725-8249-3DF2CAF414AF}] => (Allow) C:\Users\mick__000\AppData\Roaming\Dropbox\bin\Dropbox.exeFirewallRules: [TCP Query User{D7E990AE-F1EC-41E0-87F9-AB070F76A5D6}C:\users\mick__000\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\mick__000\appdata\roaming\dropbox\bin\dropbox.exeFirewallRules: [uDP Query User{FA8D25F9-0477-4C53-AF91-650EE7051550}C:\users\mick__000\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\mick__000\appdata\roaming\dropbox\bin\dropbox.exeFirewallRules: [{ABF01A08-AACD-456D-BC15-39202C7CC674}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Faulty Device Manager Devices ============= Name: Officejet J4680 seriesDescription: Officejet J4680 seriesClass Guid: {4d36e971-e325-11ce-bfc1-08002be10318}Manufacturer: HPService: Problem: : This device is disabled. (Code 22)Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors:==================Error: (06/14/2015 05:21:16 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )Description: 80070005 Error: (06/14/2015 05:02:08 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )Description: 80070005 Error: (06/11/2015 11:03:35 PM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application name: Explorer.EXE, version: 6.3.9600.17667, time stamp: 0x54c6f7c2Faulting module name: SHELL32.dll, version: 6.3.9600.17680, time stamp: 0x54dc3611Exception code: 0xc0000005Fault offset: 0x00000000007c7f78Faulting process ID: 0xd24Faulting application start time: 0xExplorer.EXE0Faulting application path: Explorer.EXE1Faulting module path: Explorer.EXE2Report ID: Explorer.EXE3Faulting package full name: Explorer.EXE4Faulting package-relative application ID: Explorer.EXE5 Error: (06/11/2015 09:21:26 PM) (Source: QuickBooks) (EventID: 4) (User: )Description: An unexpected error has occured in "QuickBooks Pro":PDF Generation failed. PrintTransaction succeeded. The last PDF job failed. Error: (06/11/2015 09:21:26 PM) (Source: QuickBooks) (EventID: 4) (User: )Description: An unexpected error has occured in "QuickBooks Pro":Deleting "C:\Users\MICK__~1\AppData\Local\Temp\Est_84_from_Engineering_Building_Services_Ltd_5104.pdf" due to PDF generation failure. Error: (06/11/2015 09:21:26 PM) (Source: QuickBooks) (EventID: 4) (User: )Description: An unexpected error has occured in "QuickBooks Pro":Unable to open the PDF file, "C:\Users\MICK__~1\AppData\Local\Temp\Est_84_from_Engineering_Building_Services_Ltd_5104.pdf", for validation. Error: (06/11/2015 03:23:55 PM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application name: WerFault.exe, version: 6.3.9600.17415, time stamp: 0x54503815Faulting module name: KERNELBASE.dll, version: 6.3.9600.17736, time stamp: 0x550f42c2Exception code: 0xc0000142Fault offset: 0x0009d4f2Faulting process ID: 0x12f8Faulting application start time: 0xWerFault.exe0Faulting application path: WerFault.exe1Faulting module path: WerFault.exe2Report ID: WerFault.exe3Faulting package full name: WerFault.exe4Faulting package-relative application ID: WerFault.exe5 Error: (06/09/2015 08:33:22 PM) (Source: QuickBooks) (EventID: 4) (User: )Description: An unexpected error has occured in "QuickBooks Pro":Deleting "C:\Users\mick__000\Desktop\June 2015\Invoice 865 - TMV - Walker Lodge.pdf" due to PDF generation failure. Error: (06/09/2015 08:33:22 PM) (Source: QuickBooks) (EventID: 4) (User: )Description: An unexpected error has occured in "QuickBooks Pro":Unable to open the PDF file, "C:\Users\mick__000\Desktop\June 2015\Invoice 865 - TMV - Walker Lodge.pdf", for validation. Error: (06/02/2015 05:10:36 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )Description: 80070005 System errors:=============Error: (06/15/2015 04:26:25 PM) (Source: EventLog) (EventID: 6008) (User: )Description: The previous system shutdown at 09:28:13 on 15/06/2015 was unexpected. Error: (06/11/2015 11:04:15 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)Description: {995C996E-D918-4A8C-A302-45719A6F4EA7} Error: (06/11/2015 11:04:14 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)Description: {995C996E-D918-4A8C-A302-45719A6F4EA7} Error: (06/11/2015 11:04:14 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)Description: {995C996E-D918-4A8C-A302-45719A6F4EA7} Error: (06/08/2015 09:02:16 PM) (Source: DCOM) (EventID: 10005) (User: WORK)Description: 1084ShellHWDetectionUnavailable{DD522ACC-F821-461A-A407-50B198B896DC} Error: (06/08/2015 09:01:40 PM) (Source: DCOM) (EventID: 10005) (User: WORK)Description: 1084WSearchUnavailable{9E175B68-F52A-11D8-B9A5-505054503030} Error: (06/08/2015 09:01:40 PM) (Source: DCOM) (EventID: 10005) (User: WORK)Description: 1084WSearchUnavailable{9E175B68-F52A-11D8-B9A5-505054503030} Error: (06/08/2015 09:01:39 PM) (Source: DCOM) (EventID: 10005) (User: WORK)Description: 1084WSearchUnavailable{9E175B68-F52A-11D8-B9A5-505054503030} Error: (06/08/2015 09:01:38 PM) (Source: DCOM) (EventID: 10005) (User: WORK)Description: 1084WSearchUnavailable{9E175B68-F52A-11D8-B9A5-505054503030} Error: (06/08/2015 09:01:38 PM) (Source: DCOM) (EventID: 10005) (User: WORK)Description: 1084WSearchUnavailable{9E175B68-F52A-11D8-B9A5-505054503030} Microsoft Office:=========================Error: (06/14/2015 05:21:16 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )Description: 80070005 Error: (06/14/2015 05:02:08 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )Description: 80070005 Error: (06/11/2015 11:03:35 PM) (Source: Application Error) (EventID: 1000) (User: )Description: Explorer.EXE6.3.9600.1766754c6f7c2SHELL32.dll6.3.9600.1768054dc3611c000000500000000007c7f78d2401d0a4528dac64dbC:\Windows\Explorer.EXEC:\Windows\system32\SHELL32.dllb427f79c-1085-11e5-8298-6c71d90f7740 Error: (06/11/2015 09:21:26 PM) (Source: QuickBooks) (EventID: 4) (User: )Description: QuickBooks ProPDF Generation failed. PrintTransaction succeeded. The last PDF job failed. Error: (06/11/2015 09:21:26 PM) (Source: QuickBooks) (EventID: 4) (User: )Description: QuickBooks ProDeleting "C:\Users\MICK__~1\AppData\Local\Temp\Est_84_from_Engineering_Building_Services_Ltd_5104.pdf" due to PDF generation failure. Error: (06/11/2015 09:21:26 PM) (Source: QuickBooks) (EventID: 4) (User: )Description: QuickBooks ProUnable to open the PDF file, "C:\Users\MICK__~1\AppData\Local\Temp\Est_84_from_Engineering_Building_Services_Ltd_5104.pdf", for validation. Error: (06/11/2015 03:23:55 PM) (Source: Application Error) (EventID: 1000) (User: )Description: WerFault.exe6.3.9600.1741554503815KERNELBASE.dll6.3.9600.17736550f42c2c00001420009d4f212f801d0a452393c2964C:\Windows\SysWOW64\WerFault.exeKERNELBASE.dll7d72cff4-1045-11e5-8298-6c71d90f7740 Error: (06/09/2015 08:33:22 PM) (Source: QuickBooks) (EventID: 4) (User: )Description: QuickBooks ProDeleting "C:\Users\mick__000\Desktop\June 2015\Invoice 865 - TMV - Walker Lodge.pdf" due to PDF generation failure. Error: (06/09/2015 08:33:22 PM) (Source: QuickBooks) (EventID: 4) (User: )Description: QuickBooks ProUnable to open the PDF file, "C:\Users\mick__000\Desktop\June 2015\Invoice 865 - TMV - Walker Lodge.pdf", for validation. Error: (06/02/2015 05:10:36 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )Description: 80070005 CodeIntegrity Errors:=================================== Date: 2015-06-17 03:39:07.196 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-06-17 03:39:06.554 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-06-17 03:39:05.898 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-06-17 03:39:05.148 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-06-17 03:39:04.491 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-06-17 03:39:03.835 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-06-17 03:39:03.163 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-06-17 03:39:02.507 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-06-17 03:39:01.851 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-06-17 03:39:01.179 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. ==================== Memory info =========================== Processor: Intel® Celeron® CPU N2830 @ 2.16GHzPercentage of memory in use: 54%Total physical RAM: 3978.95 MBAvailable physical RAM: 1802.52 MBTotal Pagefile: 4682.95 MBAvailable Pagefile: 1741.7 MBTotal Virtual: 131072 MBAvailable Virtual: 131071.79 MB ==================== Drives ================================ Drive c: (TI31320500A) (Fixed) (Total:686.6 GB) (Free:621.35 GB) NTFS ==================== MBR & Partition Table ================== ========================================================Disk: 0 (Size: 698.6 GB) (Disk ID: 00000000) Partition: GPT Partition Type. ==================== End of log ============================
